General
- Target [Ryuugames] RY-RJ01437730_V2.1.7_dlcs.rar
- Size 1019.9MB
- Sample261024-q8g1savtes
- SHA256 2d20f5c8c7bebe8a30858b45848925778c35fd8a9dcb3016e75a7c50fd0f8f95
- MD5 5293457351baf62b4a587890da7cbb26
- SHA1 32378cef55941c3c22f92994354a67b4553ce3b0
- SHA512 1a3649d998d66c13566358a5a28239573617403587966c4c4c5ce1508e5b5f4ac562f3756bf5bd769c2db87f23c45c2996d3a5d80bbe2668413b64cb7155325a
- SSDEEP 25165824:HGFuReiHqoaEW63XdHTn8M5TZ0MES9P6Au2Xpy2YhKBc:HG4j2kXZT8Mf01qv3Yse
- TLSH T178B9338C35EC387D4D9666FD7727A023E21E10952CC7E1FE5AA90ABCD91B9747006ACC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
DokiDoki-Massage-v2.1.7/DokiDoki-Massage-Portable.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
DokiDoki-Massage-v2.1.7/DokiDoki-Massage-Portable.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral3
Sample
DokiDoki-Massage-v2.1.7/DokiDoki-Massage-Setup.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
DokiDoki-Massage-v2.1.7/DokiDoki-Massage-Setup.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target DokiDoki-Massage-v2.1.7/DokiDoki-Massage-Portable.exe
- Size 362.7MB
- SHA256 40728b9dcbb38697a13d8cb4fa8404919c283dfc444bbda2dd701edb71d0be37
- MD5 6ff42196a72e53c6153feb67689d120b
- SHA1 0269e806f3dedb9ae928209fb26c0a89408242d9
- SHA512 7effe41ecd78cd8540cee1c255c6dba0360a427f8aedb137f7d9a0c70fc4b1bdf9a16b2f1e32812902899e840d7f0a2256d43d5550a69c7a4f7513e6c66d66ff
- SSDEEP 6291456:i4DYu7YhVzhqGOY0IqetPwlStcgT2Q4XDwqUqU4wOzNngrSvYhcA/3/vzK/:i4DYuIzcJYtKlStcgTraTUq7rhnTqP76
- TLSH T1FF0933939AE72DECC48431F1066A04E01B5E2E5D9BC55F271AE0B7399E7F6C00D934AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
- Target DokiDoki-Massage-v2.1.7/DokiDoki-Massage-Setup.exe
- Size 335.7MB
- SHA256 451eae42db69b4603624492867d2092bc53dcd44b77a77028a90aee99b9a9c3e
- MD5 1f5141fa5386a56e36f635cbccb3838a
- SHA1 f2442ec1e826ff8dff91f1a1cc32a866a7968d5e
- SHA512 15ca38bab1bb7f79ef78b0c860cbaa2035a7f2bc683fa97cbe65516726db5bf3aa1948d3cb747ece8fa60574415ba41b3919db0884721cd70d6ccf9573dde694
- SSDEEP 6291456:34DYu7YhVzhqGOY0IqetPwlStcgT2Q4XDwqUqU4wOzNngrSvYhcA/3/vZ:34DYuIzcJYtKlStcgTraTUq7rhnTqPx
- TLSH T172F833939AE32DECC49431F106AA05E01B6D1E5D9BC55F265EF0B7299E3F6C00D930AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10